search

AzureAD / microsoft-authentication-library-common-for-android

Common code used by both the Active Directory Authentication Library (ADAL) and the Microsoft Authentication Library (MSAL)
MIT License
41 stars 35 forks source link

Logs ClientCertChallenge #2411

Closed rpdome closed 5 months ago

rpdome commented 5 months ago

Needed for CBA investigation.

Context:

got an IcM where the customer is getting CBA prompt sporadically. https://portal.microsofticm.com/imp/v3/incidents/incident/505319757/summary

Either there's an OS bug, or the server is sporadically sending malformed challenge.

From Android Documentation

keyTypes and issuers may be used to narrow down suggested choices to the user. If either keyTypes or issuers is specified and non-empty, and there are no matching certificates in the KeyChain, then the certificate selection prompt would be suppressed entirely